Senior DevSecOps Engineer (Remote, Full-Time) [AS262]

Responsibilities

• Maintain and strengthen AWS infrastructure, including ECS and EKS, supporting the company's platform.
• Own automated tests and validation checks that ensure ongoing compliance with security frameworks, including SOC 2 and ISO 27001.
• Identify and flag security compliance issues while collaborating with the engineering team rather than directly leading audit remediation.
• Embed security thinking throughout the software development lifecycle.
• Improve the security, reliability, and scalability of the platform infrastructure.
• Deliver infrastructure solutions independently with minimal oversight.
• Collaborate closely with software engineers to enable secure-by-design and dependable software delivery.
• Make sound technical and infrastructure design decisions while iterating quickly.
• Take full ownership of infrastructure initiatives and contribute to long-term platform stability.

Requirements

• 5+ years of experience in DevSecOps or a related role.
• 5+ years of overall DevOps/DevSecOps experience.
• Strong experience with AWS, including ECS and EKS.
• Strong experience with Terraform.
• Strong experience with Kubernetes or container orchestration.
• Strong experience with Docker.
• Strong experience with Ansible.
• Strong experience with Prometheus and Grafana.
• Strong experience building and maintaining CI/CD pipelines and automation.
• Good understanding of security best practices and compliance frameworks, including SOC 2 and ISO 27001.
• Ability to work independently, make technical decisions, and deliver with minimal supervision.
• Strong problem-solving skills and a product-focused mindset.
• Experience working in a fast-paced environment.
• Ability to collaborate effectively with software engineering teams.

Nice To Have

• Experience with EKS specifically.
• Experience working within a SaaS or technology product company.
• Previous experience leading infrastructure projects or taking ownership of major infrastructure initiatives.
• Broader exposure to security and compliance practices beyond core operational responsibilities.